Data Protection & Child Safeguarding Lead

About the Role

A newly founded education initiative in Qatar is launching a nationwide technology and computing programme for secondary education. This pivotal role is part of the founding team, reporting directly to the Managing Director, with escalation access to the Founder. The programme will involve handling extensive personal data of children, requiring a dedicated lead to establish and enforce data protection and safeguarding principles from scratch.

Key Responsibilities

• Design and implement lawful basis and consent systems for processing minors' personal information, including mechanisms for obtaining parental and school approvals.
• Lead Data Protection Impact Assessments (DPIAs) for the platform and all new data processing operations.
• Develop and enforce policies on data retention, minimisation, and deletion, covering procedures for students exiting the programme.
• Define requirements for data residency and manage cross-border data transfer constraints as fundamental design parameters.
• Conduct comprehensive due diligence for all third-party suppliers and processors accessing student data.
• Perform safeguarding-by-design evaluations on all product and content releases prior to deployment within schools.
• Plan, test, and oversee response protocols to data breaches.
• Serve as the organization's liaison to Ministry officials, school authorities, and parents, articulating the data protection approach.
• Create and maintain policies, training, and foster a culture of safeguarding among teaching staff.

Candidate Profile

• Possess 6 to 8+ years of professional experience in data protection, privacy, or information governance with proven experience in developing and managing frameworks.
• Hands-on experience managing children’s personal data within education, health, social care, or child-oriented technologies; general privacy experience is insufficient.
• Familiarity with the data protection regulations in Qatar or similar legal frameworks, with an ability to rapidly acquire local expertise.
• Experienced in independently conducting DPIAs and supplier due diligence assessments.
• Proven ability to assert decisions firmly under commercial pressure, particularly situations where approval was withheld for data protection concerns and subsequent outcomes.

Additional Advantages

• Proficiency in Arabic, either native or professional level, facilitating interactions with schools, parents, and Ministry stakeholders.
• Experience working within Qatar or the Gulf Cooperation Council (GCC) region, especially in government or Ministry contexts.
• Possession of recognized privacy or information governance certifications.
• Track record of establishing a data protection function from inception with no pre-existing framework.

Additional Information

This appointment requires a candidate comfortable with being the authoritative voice of refusal and explanation in accessible terms, such as to school leaders and parents. Initially, the role will operate independently, supported by external specialists, as frameworks are created from the ground up.

Application Requirements: Candidates are requested to submit their CV accompanied by a one-page narrative outlining a specific experience where they upheld data protection or safeguarding standards despite commercial challenges, describing how the scenario was managed. Submissions without this document will be deemed incomplete and not reviewed.